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Top Stories 

• Latour Trading LLC agreed to pay $16 million in penalties to resolve U.S. Securities and 
Exchange Commission charges that the high-frequency trading firm violated net capital 
rules during a 2-year period. - U.S. Securities and Exchange Commission (See item 6) 

• Metropolitan St. Louis Sewer District officials announced September 17 that no public 
threat was found after a water main break dumped 1 1 million gallons of sewage in the 
Chesterfield area, some of which reached the Missouri River September 8. - Associated 
Press (See item VT) 

• The attorney general of Virginia announced a lawsuit September 16 seeking $1.15 billion 
in damages from 13 banks for their alleged roles in fraudulently misleading the Virginia 
Retirement System from 2004 to 2010. - Washington Business Journal (See item 2 ^ 

• Orange County, California-based Corinthian Colleges Inc. was sued by the U.S. Consumer 
Financial Protection Bureau September 16 for allegedly deceiving tens of thousands of 
students by operating an illegal lending scheme. - Los Angeles Times (See item 21) 
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Energy Sector 



1. September 16, U.S. Department of Justice - (Michigan) U.S. settlement with 
Michigan utility to reduce emissions at its coal-fired power plants, fund projects to 
benefit environment and communities. Consumers Energy, a subsidiary of CMS 
Energy Corporation, reached a settlement with the U.S. Department of Justice’s 
Environment and Natural Resources Division September 16 to pay a civil penalty of 
$2.75 million to resolve Clean Air Act violations and spend at least $7.7 million on 
environmental projects after authorities found the company modified 5 coal-fired 
Michigan facilities which caused the release of excess sulfur dioxide and nitrogen 
oxide. The utility will spend an estimated $1 billion to reduce harmful emissions at its 
plants. 

Source: http ://w w w . i ustice . go v/opa/pr/20 1 4/September/ 1 4-enrd-9 8 5 .html 

2. September 16, Associated Press - (Delaware) Worker stole $30K of copper wire 
from Delaware power plant, police say. Delaware police arrested a man for stealing 
nearly 1 1,000 pounds of eopper wire worth an estimated $30,000 between November 
2012 and July 2014 from McKee Run Generating Station in Dover. 

Source: http://6abc.com/news/police-worker-stole-$30k-of-copper-wire-from-power- 
plant/3 10960/ 

3. September 16, Salt Lake Tribune - (Utah) One dead in central Utah coal mine 
accident. UtahAmerican Energy Inc.’s West Ridge Mine in Carbon County, Utah, 
closed September 16 after a worker died in an equipment -related accident. Officials 
with the federal Mine Safety and Health Administration are investigating. 

Source: http ://w w w. sltrib .com/sltrib/news/5 8419174-7 8/mine-accident-coal- 
energy.html. csp 

4. September 16, Associated Press - (Michigan) Natural gas leak plugged, Michigan 
evacuation ends. Residents in Berrien County’s Benton Township were allowed to 
return home after evacuating for several hours September 16 due to a leak from a 
TransCanada Corp. natural gas line. Crews plugged the leak after the affected section 
of the line was shut down during the incident. 

Source: http://newsok.com/article/feed/736 1 57 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

5. September 16, U.S. Department o/LaZ^or- (Illinois) OSHA cites KVK Foundry for 
repeatedly violating safety standards. The Occupational Safety and Health 
Administration cited KVK Foundry Inc., September 16 for 2 willful and 2 repeat health 
and safety violations at its Millington facility. Proposed fines totaled $48,928. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26703 

r Return to top i 



Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

6. September 17, U.S. Securities and Exchange Commission - (New York) SEC charges 
N.Y. -based high frequency trading firm with violating net capital rule for broker- 
dealers. Latour Trading LLC agreed to pay $16 million in penalties September 17 to 
resolve U.S. Securities and Exchange Commission charges that the high-frequency 
trading firm violated net capital rules on 19 of 24 reporting dates during a 2-year 
period. The chief operating officer when the violations occurred also agreed to pay 
$150,000 in the settlement. 

Source: http ://w w w . sec . gov/Ne w s/Pres sRelease/Detail/Pres sRelease/ 137054297 2403 

7. September 16, KrebsOnSecurity - (National) Breach at Goodwill vendor lasted 18 
months. Payment vendor C&K Systems stated that its hosted managed services 
systems were found by investigators to be compromised between Eebruary 10, 2013 
and August 14, 2014, allowing the installation of the infostealer.rawpos point of sale 
(PoS) malware that led to payment card breaches from over 330 Goodwill retail 
locations. The malware infection was not detected by the company’s systems until 
September 5 and affected Goodwill and two other customers. 

Source: http://krebsonsecuritv.eom/2014/09/breach-at-goodwill-vendor-lasted- 18- 
months/ 

8. September 16, Middletown Press - (Connecticut) Man admits role in mortgage fraud 
in Middlesex, area counties. A Newington man pleaded guilty September 15 to his 
role in a mortgage fraud scheme that used straw buyers and fraudulent documents to 
obtain mortgages for around 50 properties in Hartford, New Haven, and Middlesex 
counties, causing around $5.6 million in losses to lenders. 

Source: http://www.middletownpress.eom/general-news/20140916/man-admits-role-in- 
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mortgage-fraud-in-middlesex-area-counties 



9. September 16, U.S. Securities and Exchange Commission — (International) SEC 
charges IT employee at law firm with insider trading ahead of merger 
announcements. The U.S. Securities and Exchange Commission September 16 
charged a senior information technology professional at law firm Wilson Sonsini 
Goodrich & Rosati with allegedly engaging in insider trading using information from 
client-related databases to make over $300,000 in illicit profits using a brokerage 
account held in the name of a relative in Russia. The U.S. Attorney’s Office for the 
Southern District of New York also filed criminal charges against the man in a parallel 
action. 

Source: http://www.sec.gov/News/PressRelease/Detail/PressRelease/137Q542965393 
For additional stories, see items 2^ and 21 
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Transportation Systems Sector 

10. September 16, Sacramento Bee - (California) Section of Highway 50 in El Dorado 
County closed due to fire, evacuations ordered in Pollock Pines. Both directions of 
U.S. Highway 50 between Sly Park Road and Fresh Pond in El Dorado County 
remained closed to traffic September 16 due to the King Fire. Surrounding roads were 
also evacuated along the stretch of the highway. 

Source: http://www.sacbee.eom/2014/09/16/6712865/section-of-highwav-50-in-el- 
dorado.html 

11. September 16, San Jose Mercury News - (California) San Jose: plane lands safely 
after wing flap issue diverts Phoenix-bound flight to Oakland. A Southwest 
Airlines flight en route to Phoenix, Arizona, from San Jose, California, made an 
emergency landing at Oakland International Airport September 16 due to mechanical 
issues with the wing flaps not performing correctly following takeoff. The plane landed 
safely and the 128 passengers and crew members were moved onto a new aircraft. 
Source: http://www.mercurvnews.com/saratoga/ci 26539285/san-jose-plane-lands- 
safely-after- wing-flap 

12. September 16, Associated Press - (Illinois) Southwest flight makes emergency 
landing at Midway. No injuries were reported when a Southwest Airlines flight 
headed to New York from Chicago returned to Midway International Airport 
September 16 to make an emergency landing after an engine indication light came on 
in the cockpit shortly after takeoff. The 118 passengers and 5 crew members were 
placed on new flights. 

Source: http://www.mvfoxchicago.com/story/26548889/southwest-flight-makes- 
emergency-landing-at-midway 

13. September 16, WISH 8 Indianapolis - (Indiana) 3-semi crash shuts down 1-65 near 
Uniontown for hours. Northbound lanes on Interstate 65 in Jackson County, Indiana, 
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were closed for nearly 5 hours September 16 due to a fire that broke out following a 
crash that involved 3 semi-trucks. Two of the three drivers were injured and taken to 
nearby hospitals. 

Source: http://wishtv.eom/2014/09/16/multiple-semi-accident-closes-i-65-northbound/ 
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Food and Agriculture Sector 

14. September 16, ValleyNewsLive.com - (Minnesota) Man rescued from grain bin in 
Wilkin County. Crews used grain bin rescue tubes to extricate a worker from a 
Brushvale Seed grain elevator in Wilkin County September 16 after he became trapped 
while working to loosen corn within the bin. 

Source: http://www.vallevnewslive.com/storv/26546613/update-man-rescued-from- 
grain-bin-in-wiikin-county 

15. September 16, KBOl 2 Boise - (Idaho) More than 30 cattle dead after truck rolls 
onto its side. A semi-truck carrying 120 cattle turned onto its side after the driver lost 
control of the vehicle while travelling at a high speed around a curve on a road in Ada 
County September 15, leading to the death of 33 cows. The driver and a passenger were 
transported to an area hospital with minor injuries. 

Source: http://www.kboi2.com/news/local/Truck-haulting-cattle-rolls-onto-its-side- 
275 19527 Thtml 

16. September 16, KSFY 13 Sioux Falls - (South Dakota) OSHA cites South Dakota 
grain elevator in worker's death. Prairie Ag Partners was cited by the Occupational 
Safety and Health Administration (OSHA) September 12 for 11 safety violations 
following an inspection of the company’s Lake Preston facility that was initiated after a 
worker was killed March 14 while repairing a jammed chute inside a grain elevator. 
Proposed penalties total $120,120 and the company was placed into OSHA’s Severe 
Violate Enforcement Program which mandates safety training. 

Source: http://www.ksfv.com/storv/26546699/osha-cites-south-dakota-grain-elevator- 
in-workers-death 
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Water and Wastewater Systems Sector 

17. September 17, Associated Press - (Missouri) Main break dumps 11 million gallons 
of sewage. Metropolitan St. Louis Sewer District officials announced September 17 
that no public threat was found after a water main break dumped 1 1 million gallons of 
sewage in the Chesterfield area, some of which reached the Missouri River September 
8. Authorities concluded that most of the sewage went upstream away from drinking 
water intakes. 

Source: http://www.wral.com/main-break-dumps- 1 1-million-gallons-of- 
sewage/ 1 3990290/ 



-5 - 



18. September 17, Dubois County //eraZJ - (Indiana) Boil order issued for Jasper water 
customers. The Jasper Water Department issued a boil water advisory to residents 
living in the city as well as in Ireland, Indiana, September 17 until further notice due to 
high levels of manganese that were found in the water. 

Source: https://duboiscountvherald.eom/b/boil-order-issued-for-jasper-water-customers 

19. September 16, WWSB 40 Sarasota - (Florida) North Lido swim advisory lifted. A no 
swim advisory issued at North Lido Beach in Lido Key beginning September 1 1 was 
lifted September 16 after water results returned to a satisfactory level meeting both the 
U.S. Environmental Protection Agency and State recreational water standards. 

Source: http://www.mvsuncoast.com/news/local/north-lido-swim-advisory- 
lifted/article b083el54-3dd6-l Ie4-890f-0017a43b2370.html 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 



20. September 16, Washington Business Journal - (Virginia) Virginia attorney general 
sues 13 banks for fraud. The attorney general of Virginia announced a lawsuit 
September 16 seeking $1.15 billion in damages from 13 banks for their alleged roles in 
fraudulently misleading the Virginia Retirement System from 2004 to 2010, forcing the 
State to sell most of the securities built on junk mortgages causing a loss of $383 
million. 

Source: http://www.bizioumals.eom/washington/news/2014/09/16/virginia-attomev- 
general-sues-13-banks-for-fraud.html 

21. September 16, Los Angeles Times - (National) Feds sue Corinthian Colleges, alleging 
predatory lending. Orange County-based Corinthian Colleges Inc. was sued by the 
U.S. Consumer Financial Protection Bureau September 16 for allegedly deceiving tens 
of thousands of students by operating an illegal lending scheme. The for-profit college 
operator’s plan forced students to take out private loans costing more than $500 million 
since July 201 1 after raising tuition above federal aid limits. 

Source: http://www.latimes.com/la-fi-corinthian-colleges-sued-bv-consumer- financial- 
protection-bureau-20 1 409 1 6-storv.html 

22. September 16, KRIS 6 Corpus Christi - (Texas) Zavala Elementary dismisses 
students after power outage. Authorities are investigating the cause of a power outage 
that prompted the evacuation of students at Zavala Elementary School in Corpus 
Christi and the cancellation of classes September 16. 

Source: http://www.kristv.com/news/zavala-elementary-dismisses-students-after- 
power-outage/ 
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23. September 16, Portland Oregonian - (Oregon) Onion Mountain Fire: Evacuation 
advisories remain in effect. Fire crews reached 2 percent containment September 16 
of the Onion Mountain Fire that burned over 3,000 acres in Josephine County. 
Evacuation orders remained in effect for surrounding areas. 

Source: 

http://www.oregonlive.com/wildfires/index.ssf/2014/09/onion mountain fire evacuati 
on.html 

24. September 16, KMBC 9 Kansas City - (Missouri) Sherwood Cass School to stay 
closed after fire. A September 16 fire at the Sherwood-Cass school building in 
Creighton forced the evacuation of students and staff and the cancellation of classes 
September 17. The fire began in a utility closet in the high school section of the school 
and officials estimated that repairs could take several days. 

Source: http://www.kmbc.com/news/investigators-look-into-cause-of-fire-at-sherwood- 
high-school/28090562 

For another story, see item 10 
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Emergency Services Sector 

25. September 17, Reuters - (California) Seventh Los Angeles sheriff’s official found 
guilty in jail probe. A U.S. District Court jury found a former Los Angeles sheriffs 
deputy guilty September 16 for his role in allegedly subjecting inmates and visitors at 
two Los Angeles lockups to unjustified beatings or detentions and attempting to hinder 
a federal probe into prisoner abuse and other misconduct. Six co-defendants were tried 
separately and convicted for their roles in July. 

Source: http://news.msn.com/crime-iustice/seventh-los-angeles-sheriffs-official-found- 
guilty-in- jail-probe 
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Information Technology Sector 

26. September 17, SccMnfywcck - (International) Twitter fixes vulnerability potentially 
impacting company’s ad revenue. A security researcher identified and reported a 
vulnerability in a Twitter subdomain that could be used to delete the payment card 
information used by advertisers to pay for ads on the social media network. Twitter 
addressed the vulnerability and awarded a $2,800 bounty to the researcher. 

Source: http://www.securitvweek.com/twitter-fixes-vulnerabilitv-potentially-impacting- 
companys-ad-revenue 

27. September 17, Sccwn/ywcek - (International) Amazon fixes persistent XSS 
vulnerability affecting Kindle library. Amazon addressed a cross-site scripting (XSS) 
vulnerability on the Amazon Web page used to manage users’ Kindle libraries that 
could be used by an attacker to inject malicious code through eBook metadata. 
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Source: http://www.securitvweek.com/amazon-fixes-persistent-xss-vulnerability- 
affecting-kindle-library 

28. September 17, Help Net Security - (International) Macro based malware is on the 
rise. Researchers with Sophos found that macro-based malware created in Visual Basic 
rose from around 6 percent of document malware to 28 percent in July, among other 
findings. 

Source: http://www.net-securitv.org/malware news.php?id=2867 

29. September 16, Threatpost - (International) Adobe gets delayed Reader update out 
the door. Adobe released new versions of Adobe Reader and Acrobat September 16 
that were delayed during Adobe’s scheduled patch release the week of September 8. 
The updates close eight vulnerabilities including two memory corruption issues and a 
cross-site scripting (XSS) vulnerability affecting Macintosh users. 

Source: http://threatpost.com/adobe-gets-delaved-reader-update-out-the-door 

30. September 16, Threatpost - (International) Archie exploit kit targets Adobe, 
Silverlight vulnerabilities. Researchers at AlienVault Labs analyzed a new exploit kit 
first identified by EmergingThreats researchers and found that the Archie exploit kit 
attempts to exploit older versions of Adobe Flash, Reader, and Microsoft Silverlight 
and Internet Explorer. 

Source: http://threatpost.com/archie-exploit-kit-targets-adobe-silverlight-vulnerabilities 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: httD://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

31. September 17, Salt Lake Tribune - (Utah) $500K in damage from Weber 

Fairgrounds fire. Fire officials reported that a September 16 fire that tore through a 
storage building at the Weber County Fairgrounds in Utah is believed to be accidental 
and to have started in an all-terrain vehicle. The fire caused an estimated $500,000 in 
damage to the structure and the fairgrounds’ equipment and vehicles contained within. 
Source: http://www.sltrib.com/sltrib/news/58423490-78/fire-fairgrounds-equipment- 
weber.html.csp 
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32. September 17, WDRB 41 Louisville - (Kentucky) Clothing store damaged by early 
morning fire at the Outlet Shoppes of the Bluegrass. Two stores at the Outlet 
Shoppes of the Bluegrass outlet mall in Simpsonville suffered fire and water damage 
due to a September 17 fire that started in a display unit of one store and activated a 
sprinkler system. The store in which the fire began was closed indefinitely after the 
fire. 

Source: http://www.wdrb.com/storv/26552737/clothing-store-damaged-bv-early- 
morning-fire-at-the-outlet-shoppes-of-the -bluegrass 

33. September 17, Middletown Times Herald-Record - QSqsn York) Fire badly damages 
pizzeria, apartments in Florida. A fire that started inside an apartment unit spread 
throughout a three-story structure in the village of Florida, New York, causing 
significant damage to a restaurant located within. 

Source: 

http://www.recordonline.com/apps/pbcs.dll/article?AID=/20140917/NEWS/409 170324 

34. September 16, Associated Press - (California) TJ Maxx, Marshalls owner ordered to 
pay $2.8M. Officials announced September 16 that a Monterey County judge ordered 
the owner of The TJX Companies to pay $2.8 million to settle allegations that more 
than 286 stores in California improperly disposed of hazardous waste, including 
batteries and other ignitable and toxic materials. 

Source: http://www.sacbee.eom/2014/09/16/6712343/tj-maxx-marshalls-owner- 
ordered.html 

35. September 16, Associated Press; Terre Haute Tribune-Star - (Indiana) Police disable 2 
improvised explosive devices. The Indiana State Patrol’s Explosive Ordinance 
Disposal team disabled two 10-inch long improvised explosive devices that were 
discovered by a city parks employee September 16 inside Collett Park in Terre Haute. 
Officials reported that one device appeared to have been ignited but failed to detonate. 
Source: http://www.theindvchannel.com/news/local-news/police-disable-2-improvised- 
explosive-devices 

36. September 15, Bay City News Service - (California) San Jose: Suspicious package 
found harmless at Hilton San Jose Hotel after two floors evacuated. Two floors of 
the Hilton San Jose Hotel were evacuated for about 7 hours September 13 while 
authorities investigated a suspicious package that was found inside a restroom. The San 
Jose Police Department’s bomb squad cleared the scene after securing the package and 
determining that it was not an explosive device. 

Source: http://www.insidebavarea.com/bav-area-news/ci 26532145/san-jose- 
suspicious-package-found-harmless-at-hilton 

Eor another story, see item 7 
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Dams Sector 



37. September 16, Bend Bulletin - (Oregon) Park district goes all-in on Colorado dam 
project. The Bend Park and Recreation District voted September 16 to award a $7.68 
million construction contract towards the completion of the safe passage project at the 
Colorado Avenue dam in which the Deschutes River would be split into 3 distinct 
channels below the dam. 

Source: http://www.bendbulletin.com/localstate/2420523-151/park-district-goes-all-in- 
on-colorado-dam-project 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support® govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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